Chainalysis reveals customer data breach caused by automated AI cyberattack

Blockchain intelligence firm Chainalysis has revealed that attackers breached its internal systems and tools by using offensive agentic techniques earlier this month. The company published a security incident disclosure on Friday alongside notices sent to affected clients, which include law enforcement agencies, cryptocurrency exchanges, and financial institutions. [1][2]

The unauthorized intruders accessed customer user IDs, full names, email addresses, and organizational role labels. Chainalysis reported that it found no evidence of compromised authentication credentials, session tokens, or sensitive investigation data. While the firm works to identify specific records affected for each client, it is patching vulnerabilities and employing large language models alongside outside cybersecurity specialists to audit its platform. [2]

Chainalysis advised clients to activate two-factor authentication and stay vigilant against impersonation scams, unexpected login prompts, and password resets. The company stated that the breach is unrelated to the recent $6.3 billion theft from Binance, though it has not disclosed which vulnerabilities the automated agents exploited. [2]